RHSA-2025:19201HighCVSS 8.8

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

Published
October 28, 2025
Last Modified
June 16, 2026

🔗 CVE IDs covered (4)

CVE-2025-9907 · pendingCVE-2025-9908 · pendingCVE-2025-59343CVE-2025-59682

📋 Description

CVE-2025-9907 — event-driven-ansible: Event Stream Test Mode Exposes Sensitive Headers in AAP EDA CVE-2025-9908 — event-driven-ansible: Sensitive Internal Headers Disclosure in AAP EDA Event Streams CVE-2025-59343 — tar-fs: tar-fs symlink validation bypass CVE-2025-59682 — django: Potential partial directory-traversal via archive.extract()

🔗 References (8)